Synopsis
The remote host contains a web browser that is affected by several vulnerabilities.
Description
The version of Apple Safari installed on the remote Mac OS X 10.7 or 10.8 host is earlier than 6.0.5. It is, therefore, potentially affected by several issues :
- Multiple memory corruption vulnerabilities exist in WebKit that could lead to unexpected program termination or arbitrary code execution. (CVE-2013-0879 / CVE-2013-0991 / CVE-2013-0992 / CVE-2013-0993 / CVE-2013-0994 / CVE-2013-0995 / CVE-2013-0996 / CVE-2013-0997 / CVE-2013-0998 / CVE-2013-0999 / CVE-2013-1000 / CVE-2013-1001 / CVE-2013-1002 / CVE-2013-1003 / CVE-2013-1004 / CVE-2013-1005 / CVE-2013-1006 / CVE-2013-1007 / CVE-2013-1008 / CVE-2013-1009 / CVE-2013-1010 / CVE-2013-1011 / CVE-2013-1023)
- A cross-site scripting issue exists in WebKit's handling of iframes. (CVE-2013-1012)
- A cross-site scripting issue exists in WebKit's handling of copied and pasted data in HTML documents.
(CVE-2013-0926)
- In rewriting URLs to prevent cross-site scripting attacks, XSS Auditor could be abused, leading to malicious alteration of the behavior of a form submission. (CVE-2013-1013)
Solution
Upgrade to Apple Safari 6.0.5 or later.